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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)D Responsive to communication(s) filed on . 

2a)E3 This action is FINAL. 2b)D This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1-8,10-20,22 and 23 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) IEI Claim(s) 1-8.10-20.22 and 23 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) D The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

1 1) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) ^ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)IEI All b)D Some * c)D None of: 

1 .El Certified copies of the priority documents have been received. 

2. Q Certified copies of the priority documents have been received in Application No. . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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Response to Arguments 

Applicant's arguments with respect to claims 1-8,10-20,22 and 23 have been considered 
but are moot in view of the new ground(s) of rejection. 

Priority 

Receipt is acknowledged of papers submitted under 35 U.S.C. 1 19(a)-(d), which papers 
have been placed of record in the file. 

Claim Rejections - 35 USC §103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

Claims 1-8,10-20,22 and 23 rejected under 35 U.S.C. 103(a) as being unpatentable over 
Adachi (U.S. Patent Application Publication 2003/0156683) in view of Thomas et al. (U.S. 
Patent Application Publication 2004/0078238). 

For claim 1 , Adachi teaches, a method for accessing sensitive data comprising at least one of 
remotely transmitting and observing the sensitive data of an application computer, comprising: 
(Adachi, paragraph 53, remote maintenance, communications unit) 

requesting access to the sensitive data that is a least one of remotely transmitting and 
observing the sensitive data; (Adachi, paragraph 53, remote maintenance, communications unit) 
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Adachi fails to disclose 

identifying constituent data parts requiring secrecy of the sensitive data; 
and excluding the constituent data parts from the access; 

wherein the sensitive data comprises at least one of a screen content and a video frame. 
Thomas teaches, identifying constituent data parts requiring secrecy of the sensitive data; 
(Thomas, paragraph 11, anonymizing medical data) 

and excluding the constituent data parts from the access; (Thomas, paragraph 11, 
anonymizing) 

wherein the sensitive data comprises at least one of a screen content and a video frame. 
(Adachi, paragraph 1 L CT scan) 

For claim 2, Adachi-Thomas teaches, the method according to claim 1, wherein excluding the 
constituent data parts comprises at least one of erasing, anonymizing, and pseudonyminizing the 
data. (Adachi, paragraph 11, anonymizing) 

For claim 3, Adachi-Thomas teaches, the method according to claim 1, further comprising: 
storing information related to constituent data parts requiring secrecy in a reference 
databank; (Thomas, paragraph 14. paired database) 

wherein identifying constituent data parts comprises comparing the constituent data parts with 
the stored information related to the constituent data parts in the reference databank. (Thomas, 
paragraph 14. paired database) 
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For claim 4, Adachi teaches, the method according to claim 3, wherein the reference databank is 
selected from the group consisting of a name databank, an address databank, and a people 
databank. (Thomas, paragraph 14. paired database) 

For claim 5, Adachi-Thomas teaches, the method according to claim 1, wherein identifying 
constituent data parts is performed by utilizing a search mask. (Thomas, paragraph 14. paired 
database) 

For claim 6, Adachi-Thomas teaches, the method according to claim 5, wherein the search mask 
is related to at least one of a date-specification format and an address-specification format. 
(Thomas, paragraph 14, address) 

For claim 7, Adachi-Thomas teaches, the method according to claim 1, wherein identifying 
constituent data parts is performed by utilizing a data position within the sensitive data. (Thomas, 
paragraph 14, paired database) 

For claim 8, Adachi-Thomas teaches, the method according to claim 7, wherein the data position 
is related to at least one of a name data field and an address data field. (Thomas, paragraph 14, 
name, address) 
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For claim 9, Adachi-Thomas teaches, the method according to claim 1, wherein the sensitive 
data comprises at least one of a screen content and a video frame. (Thomas, paragraph 1 1, CT 
scan) 

For claim 10, Adachi-Thomas teaches, the method according to claim 1, further comprising: 
requesting, by a remotely arranged computer, data for remote maintenance of an 

application computer; (Adachi, paragraphs 79,80, remote maintenance) 

and transmitting the data upon the request of a remotely arranged computer. (Adachi, 

paragraphs 79,80, remote maintenance) 

For claim 11, Adachi-Thomas teaches, a computer comprising: 
a processor; (Adachi, paragraph 61) 
a memory; (Adachi, paragraph 61) 

a data protection module for remote access to sensitive data of an application computer, 
the data protection module being stored in the memory and designed to run on the processor, the 
data protection module comprising: 

an application request input by which the application computer can transmit the sensitive 
data to the data protection module; (Adachi, paragraph 53, communication) and (Thomas, 
paragraph 1 1 , anonymizing) 

an identification mechanism configured to identify constituent data parts of the sensitive 
data; (Thomas, paragraph 11, anonymizing) 
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an exclusion mechanism configured to exclude the identified constituent data parts; 
(Thomas, paragraph 11, anonymizing) 

and an output configured to output the sensitive data without the constituent data parts; 
(Thomas, paragraph 11, anonymizing) 

and an image data processor configured to process screen content or a video frame, the 
image data processor being further configured to identify the constituent data parts based on 
sensible content of the screen content or video frame. (Thomas, paragraph 11, anonymizing) 

For claim 12, Adachi-Thomas teaches, the computer according to claim 11, wherein the 
constituent data parts comprises at least one of name, age, and address. (Thomas, paragraph 11, 
anonymizing) 

For claim 13, Adachi-Thomas teaches, the computer according to claim 11, wherein the data 
protection module is configured as at least one of a card that is installable in the application 
computer, a device that can be connected to the application computer, and an integral component 
of the application computer. (Thomas, paragraph 10 , single system) 

For claim 14, Adachi-Thomas teaches, the computer according to claim 11, further comprising at 
least one of an eraser, an anonymizer, and a pseudonymizer for the constituent data parts. 
(Thomas, paragraph 1 1 , anonymizing) 

For claim 15, Adachi-Thomas teaches, the computer according to claim 11, further comprising: 
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a reference databank input via which the data protection module can access a reference 
databank; (Thomas, paragraph 14, paired database) 

and a comparison mechanism configured to identify the constituent data parts based on 
content of the reference databank. (Thomas, paragraph 14, paired database) 

For claim 16, Adachi-Thomas teaches, the computer according to claim 15, wherein the 
reference databank is at least one of a name data bank, an address databank, and a people 
databank. (Thomas, paragraph 14, paired database) 

For claim 17, Adachi-Thomas teaches, the computer according to claim 11, further comprising: 
an access mechanism to a search mask storage(Thomas, paragraph 14, paired database) 
and a search mask comparison mechanism configured to identify the constituent data 

parts based on content of the search mask storage. (Thomas, paragraph 14, paired database) 

For claim 18, Adachi-Thomas teaches, the computer according to claim 17, wherein the search 
mask storage comprises at least one of a data search mask and an address-specification search 
mask. (Thomas, paragraph 14, paired database) 

For claim 19, Adachi-Thomas teaches, the computer according to claim 11, further comprising: 
a position detection mechanism configured to identify the constituent data parts based on 
a position of data within the sensitive data. (Thomas, paragraph 14, paired database) 
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For claim 20, Adachi-Thomas teaches, the computer according to claim 19, wherein the data 
position is related to at least one of a name data field and an address data field. (Thomas, 
paragraph 14, paired database) 

For claim 21, Adachi-Thomas teaches, the computer according to claim 1 1, further comprising: 

an image data processor configured to process screen content or a video frame, the image 
data processor being further configured to identify the constituent data parts based on sensible 
content of the screen content or video frame. (Thomas, paragraph 1 1, anonymizing) 

For claim 22, Adachi-Thomas teaches, the computer according to claim 11, further comprising: 
a data connection to a remotely arranged computer via which a request of the remotely 

arranged computer for transmission of the sensitive data can be received; (Adachi, paragraph 53, 

communication) and (Thomas, paragraph 11, anonymizing) 

a data connection via which the request for the transmission of sensitive data can be 

transmitted to an application computer, the application computer having a data connection via 

which the sensitive data can be received by the application computer; (Adachi, paragraph 53, 

communication) and (Thomas, paragraph 11, anonymizing) 

and a data connection via which the sensitive data can be transmitted to the remotely 

arranged computer. (Adachi, paragraph 53, communication) and (Thomas, paragraph 11, 

anonymizing) 



For claim 23, Adachi-Thomas teaches, a computer comprising: 
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a processor; (Adachi, paragraph 61) 
a memory; (Adachi, paragraph 61) 

a data protection module for remote access to sensitive data of an application computer, 
the data protection module being stored in the memory and designed to run on the processor, the 
data protection module comprising: 

an application request input by which the application computer can transmit the sensitive 
data to the data protection module; blah), paragraph 53, communication) and (Thomas, 
paragraph 11, anonymizing) 

an identification mechanism configured to identify constituent data parts of the sensitive 
data; (Thomas, paragraph 11, anonymizing) 

an exclusion mechanism configured to exclude the identified constituent data parts; 
(Thomas, paragraph 1 1 , anonymizing) 

and an output configured to output the sensitive data without the constituent data parts; 
(Thomas, paragraph 11, anonymizing) 

and a data connection to a storage that comprises identification data for identification of a 
remotely arranged maintenance computer, wherein the remotely arranged maintenance computer 
is identifiable by the data protection module using the identification data, and that data can only 
be transmitted to a remotely arranged computer depending on a result of the identification. 
(Thomas, paragraph 11, anonymizing) and (Adachi, paragraphs 73, 76, maintenance, index) 
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Conclusion 

The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. See attached Notice of references cited (if appropriate). 

Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Ajay M. Bhatia whose telephone number is (571)-272-3906. The 
examiner can normally be reached on M-F 8:30 am - 5:00 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Jason Cardone can be reached on (571)272-3933. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADALpr 571-272-1000. 




Jason Cardone 
Supervisor Patent Examiner 
Art Unit 2145 




